$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: APue4YLAFaOy9jlONK5m4GMiEwvsX6M4PcOsHLkgBgw= Subject key identifier: 5F:1D:E4:C1:E3:9F:4A:15:38:72:1B:3E:A4:6D:79:A3:58:A0:41:68 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 0199307EEA952DED537B5753D49F89CB1828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 1690 Signing time: Tue 09 Sep 2025 22:00:47 +0000 Manifest this update: Tue 09 Sep 2025 22:00:47 +0000 Manifest next update: Wed 10 Sep 2025 22:00:47 +0000 Files and hashes: 1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=) 2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=) 3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=) 4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=) 5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=) 6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=) 7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=) 8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=) 9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=) 10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=) 11: Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa (hash: R9xWi9BNSSwcGXEc8iJXQHOFaaQnnZvq83WcJjO5BE8=) 12: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: aQcI+joFElY5s2j8goYAP3LepgYZRW4P75rOMRonIQ8=) 13: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=) 14: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=) 15: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=) 16: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=) 17: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=) 18: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=) 19: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=) 20: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=) 21: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=) 22: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=) 23: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=) 24: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=) 25: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=) 26: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=) 27: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=) 28: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=) 29: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=) 30: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=) 31: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=) 32: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:30:7e:ea:95:2d:ed:53:7b:57:53:d4:9f:89:cb:18:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Sep 9 22:00:47 2025 GMT Not After : Sep 10 22:00:47 2025 GMT Subject: CN=5f1de4c1e39f4a1538721b3ea46d79a358a04168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:bf:0b:c3:83:60:83:99:42:a4:3d:13:4f: f9:07:3e:7d:4e:0a:de:cc:7b:b7:d0:f0:04:01:91: d9:86:35:31:95:5d:6b:ae:12:48:66:91:a0:c8:77: 49:6a:b2:66:ab:2f:5a:55:20:ff:9c:91:8c:a0:25: 55:c9:45:a2:86:4e:eb:dc:dd:53:b1:93:df:eb:61: 27:ad:52:5c:40:c2:f5:87:df:ab:fc:48:75:52:4f: be:86:22:4c:74:8a:79:84:87:82:71:9e:12:3c:3a: cf:9b:03:22:2b:67:80:64:3a:6d:2b:0e:05:03:d3: b6:7b:b9:98:ca:c8:24:07:60:f1:2c:57:14:a8:15: 2f:1d:a0:a8:64:ba:f9:cb:66:60:df:b7:cb:61:2f: 5b:40:ca:75:48:0f:db:52:e2:9d:a8:d7:65:34:27: 3f:3c:db:a9:57:43:83:31:71:eb:d3:c9:b8:c0:f5: 54:c5:af:8e:d7:f0:5d:d7:fe:ef:81:2b:f5:17:b5: 9d:ef:e6:e7:d3:14:80:5f:e1:b0:22:08:e6:2b:ca: 9e:8e:3b:77:35:28:bb:dc:f8:42:51:e5:42:c8:2b: b0:32:f5:b4:ee:8b:20:39:fa:dc:15:17:ef:1e:f0: dd:61:f2:4c:f8:7a:c5:5f:5a:38:fc:2c:1b:03:d3: 00:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:E4:C1:E3:9F:4A:15:38:72:1B:3E:A4:6D:79:A3:58:A0:41:68 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:99:03:9e:8e:26:3b:6a:af:89:e9:3e:47:45:a3:c5:40:c4: 09:42:30:cc:14:41:5c:03:87:c8:82:cf:84:5d:8c:ee:29:25: 8d:26:fb:9b:c9:a8:60:d0:af:41:f3:56:3f:bb:cf:05:bf:48: 4d:c8:ba:a2:35:4c:7e:03:00:37:1e:d7:4f:05:e1:f9:65:5a: d5:c4:52:7e:77:41:b3:f5:a4:8c:42:17:83:33:9c:b7:4f:da: ab:26:d3:90:7d:a1:e4:8a:e8:8b:01:77:c6:ed:11:28:7d:f7: e5:e1:9c:41:5e:14:80:82:9b:a8:a5:78:69:66:b6:82:a6:a5: 6e:35:90:89:c4:77:b9:e5:9d:15:0b:cd:b9:fb:2c:07:c6:7a: c7:f8:13:54:dc:9d:cc:36:92:b2:9d:7f:58:cc:e9:93:b6:ed: 22:0c:c9:43:aa:b5:41:69:2f:18:8f:de:a4:f4:e0:00:bb:d8: 49:43:bb:d8:f3:61:58:7f:05:75:25:2f:00:7a:b0:95:c8:a2: f3:00:e4:f3:79:0e:6e:9c:b9:34:4c:53:38:65:c6:55:2e:81: a8:ad:eb:2b:25:93:96:70:01:b7:e9:96:a1:17:f6:71:e1:2e: b2:22:9a:1b:d5:fb:bc:a0:bb:e8:88:b1:67:44:bf:de:9d:a3: 66:d0:3f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkwfuqVLe1Te1dT1J+JyxgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjUwOTA5MjIwMDQ3WhcNMjUwOTEwMjIwMDQ3WjAzMTEwLwYDVQQD Eyg1ZjFkZTRjMWUzOWY0YTE1Mzg3MjFiM2VhNDZkNzlhMzU4YTA0MTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWy/C8ODYIOZQqQ9E0/5Bz59Tgre zHu30PAEAZHZhjUxlV1rrhJIZpGgyHdJarJmqy9aVSD/nJGMoCVVyUWihk7r3N1T sZPf62EnrVJcQML1h9+r/Eh1Uk++hiJMdIp5hIeCcZ4SPDrPmwMiK2eAZDptKw4F A9O2e7mYysgkB2DxLFcUqBUvHaCoZLr5y2Zg37fLYS9bQMp1SA/bUuKdqNdlNCc/ PNupV0ODMXHr08m4wPVUxa+O1/Bd1/7vgSv1F7Wd7+bn0xSAX+GwIgjmK8qejjt3 NSi73PhCUeVCyCuwMvW07osgOfrcFRfvHvDdYfJM+HrFX1o4/CwbA9MArwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8d5MHjn0oVOHIbPqRteaNYoEFoMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA05kDno4m O2qviek+R0WjxUDECUIwzBRBXAOHyILPhF2M7ikljSb7m8moYNCvQfNWP7vPBb9I Tci6ojVMfgMANx7XTwXh+WVa1cRSfndBs/WkjEIXgzOct0/aqybTkH2h5IroiwF3 xu0RKH335eGcQV4UgIKbqKV4aWa2gqalbjWQicR3ueWdFQvNufssB8Z6x/gTVNyd zDaSsp1/WMzpk7btIgzJQ6q1QWkvGI/epPTgALvYSUO72PNhWH8FdSUvAHqwlcii 8wDk83kObpy5NExTOGXGVS6BqK3rKyWTlnABt+mWoRf2ceEusiKaG9X7vKC76Iix Z0S/3p2jZtA/Zg== -----END CERTIFICATE-----Generated at Wed Sep 10 04:13:30 2025 by rpki-client